Wildfire Threat Alert Receive and Transmit times

[jstcolorado]

What is the order of sequence in email Threat Alert generation between the receive_time and the time_generated fields? 

[reaper · Accepted solution]

Generate is when the log is first created on the dataplane, this is typically when a session or event is started. Receive time is when the log is received on the management plane which can have a delay depending on several factors including high load on either plane

Traffic Log Time Stamps

[jstcolorado]

Thanks!